Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

afdc09a68f...18.exe

windows7-x64

7

afdc09a68f...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 18:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    afdc09a68f003d34e2891f1b983191ac_JaffaCakes118.exe

  • Size

    271KB

  • MD5

    afdc09a68f003d34e2891f1b983191ac

  • SHA1

    ffd7471401cb722acef2be9632b8ec773d5f5e3e

  • SHA256

    12dd3ad863773005bc370d8f06bc9bdfa2309adef27a8fec89fb8e226965d03a

  • SHA512

    4f7f1d8aa7f257969527f25f1a4307238032c2d6df7eec009a8a6d0c9eff99970ccc5e12dfa010e4ef1f1de2f59b4b2c14a09759e173b43114f8c61e1c42b454

  • SSDEEP

    6144:fBPq2ppX2eV8UsM3yrdz4hdNJZPh04mjMTrTb3r8X5Tpt:fBi2PX2UaZyZZSj+wX5Tpt

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\afdc09a68f003d34e2891f1b983191ac_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\afdc09a68f003d34e2891f1b983191ac_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu-0984.dll
    Filesize

    266KB

    MD5

    1c621f6a52f814921b9b42156b63f8c9

    SHA1

    6f0f75cf627075eee134f9a9ccfee26203800cee

    SHA256

    44c4e0d5b3686153c7647087a61972a010ba7e19b61cdabe801b1004778b9c36

    SHA512

    60425d4ce7f8b57bb3701c3f883b8a18e7cedfac723d5fb13d1aa6624057981555d8812ab50a785138d4fc0312f1da8f516b658c0230b32b211eedc2c754ac16

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{22580B2A-1BFC-5944-BBAF-53DEF9BB29DC}\_Setup.dll
    Filesize

    170KB

    MD5

    1bfe976c0a18b0502d641f340f5220b6

    SHA1

    ba1213c32aeefc8a7ec55a75ea9d7f3b0ad5e7a8

    SHA256

    4679aef36baa2271bb29be4e226a444826f237fbe1c5d90842df0ea178fd5d3c

    SHA512

    51ca9be14df67e1b1ff071c26fc937c8cf650e4deedf622f560c8514481dbc489a0bad18ba30b258599f585ee56a6921f295a604206487fdda91ac243d65f3be

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{22580B2A-1BFC-5944-BBAF-53DEF9BB29DC}\_Setupx.dll
    Filesize

    28KB

    MD5

    856666740a759d556705602afde5a11b

    SHA1

    13580b41862c667c5e2db918d6b90abe6ef17270

    SHA256

    cb9c5c311c07c557f54a78734906c78de79404083323f307a2b0f918ea76e969

    SHA512

    36ad035c2e794256c6004e7445f83b47590186b2c5e47ad48229d74bdb41a6c9c4f9f5440e0424d02ba642a8bb0a2a978e4124c04c410454bf51a490ee3520b3

    Download Submit